CVE-2024-3365

A vulnerability was found in SourceCodester Online Library System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/users/controller.php. The manipulation of the argument user_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259469 was assigned to this vulnerability.
Configurations

No configuration.

History

08 Apr 2024, 18:48

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en SourceCodester Online Library System 1.0. Ha sido calificada como problemática. Este problema afecta un procesamiento desconocido del archivo admin/users/controller.php. La manipulación del argumento nombre_usuario conduce a cross-site scripting. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-259469.

06 Apr 2024, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-06 10:15

Updated : 2024-05-17 02:39


NVD link : CVE-2024-3365

Mitre link : CVE-2024-3365

CVE.ORG link : CVE-2024-3365


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')